PROVISION OF CENTRAL BANK OF THE RUSSIAN FEDERATION

of March 27, 2019 No. 680-P

About procedure for ensuring uninterruptedness of functioning of payment system of the Bank of Russia regarding service of urgent money transfer and service of not urgent money transfer by provision of orders about money transfer in electronic form on communication channels

This Provision based on Item 14 of part 1 of article 20 of the Federal Law of June 27, 2011 No. 161-FZ "About national payment system" (The Russian Federation Code, 2011, No. 27, Art. 3872; 2012, No. 53, Art. 7592; 2013, No. 27, Art. 3477; No. 30, Art. 4084; No. 52, Art. 6968; 2014, No. 19, Art. 2315, Art. 2317; No. 43, Art. 5803; 2015, No. 1, Art. 8, Art. 14; 2016, No. 27, Art. 4221, Art. 4223; 2017, No. 15, Art. 2134; No. 18, Art. 2665; No. 30, Art. 4456; 2018, No. 27, Art. 3950, Art. 3952; No. 32, of the Art. 5115, No. 49, of the Art. 7524) (further - the Federal Law of June 27, 2011 No. 161-FZ), and also according to the Provision of the Bank of Russia of October 3, 2017 No. 607-P "About requirements to procedure for ensuring uninterruptedness of functioning of payment system, indicators of uninterruptedness of functioning of payment system and analysis techniques of risks in payment system, including risk profiles", No. registered in the Ministry of Justice of the Russian Federation on December 22, 2017 49386, establishes procedure for ensuring uninterruptedness of functioning of payment system of the Bank of Russia regarding service of urgent money transfer and service of not urgent money transfer by provision of orders about money transfer in electronic form on communication channels.

Chapter 1. General provisions

1.1. The terms used in this Provision are applied in the values established by the Federal Law of June 27, 2011 No. 161-FZ and the Risk management policy of the Bank of Russia enacted on March 23, 2016.

1.2. Ensuring uninterruptedness of functioning of payment system of the Bank of Russia (further - BFPS) is reached on condition of rendering in payment system of the Bank of Russia (further - PS) services of payment infrastructure (further - UPI) according to requirements of the Federal Law of June 27, 2011 No. 161-FZ and regulations of the Bank of Russia adopted according to it determining rules PS, agreements of the bank (correspondent) account (sub-account) and agreements on exchange of electronic messages in case of money transfer through PS (further - proper rendering UPI) and (or) recoveries of proper rendering UPI from the moment of identification and registration risk event which led to violation of proper rendering UPI (further - incident), and recoveries of rendering UPI in case of suspension of their rendering from the moment of identification and registration of incident, which led to suspension of rendering corresponding (relevant) UPI.

Time of recovery of rendering UPI in case of suspension of their rendering, including transition to rendering UPI with use of reserve technologies and (or) the reserve automated systems, constitutes no more than 2 hours. Time of recovery of proper rendering UPI taking into account return time for the main automated decision constitutes no more than 48 hours.

1.3. Proper rendering operational services regarding availability of the PS operational center rendering operational services during the time frame which is not exceeding 2 minutes is recognized.

The guaranteed level of uninterruptedness of rendering operational services characterizing quality of functioning of operational and technological means of payment infrastructure is availability of the PS operational center % 99,00 at least during the operational day.

1.4. Proper rendering UPI regarding ensuring confidentiality of information on money transfer through PS, absence during 1 calendar month of money transfers through PS from accounts of members of PS without their consent owing to the productive computer attacks to objects of payment infrastructure of PS which operation is performed by the Bank of Russia is recognized to its integrity, and also its availability.

The guaranteed level of uninterruptedness of rendering UPI characterizing quality of functioning of operational and technological means of payment infrastructure regarding ensuring confidentiality, integrity and availability of information on money transfer through PS is:

observance of threshold level of the indicator of counteraction to information threats in PS which calculation is given in subitem 2.6 of Item 2 of appendix 1 to this Provision;

ensuring compliance of measures of protection of information and completeness of realization of processes of system of information security in payment infrastructure of PS to the requirements established by the national standard of the Russian Federation GOST P 57580.1-2017 "Safety of financial (bank) transactions. Information security of the financial organizations. Basic structure of organizational and technical measures", the approved order of Federal Agency for Technical Regulation and Metrology of August 8, 2017 No. 822 of St "About approval of the national standard" (M., Federal State Unitary Enterprise Standartinform, 2017), to the fourth level of compliance established by the national standard of the Russian Federation GOST P 57580.2-2018 "Safety of financial (bank) transactions. Information security of the financial organizations. Technique of assessment of conformity", the approved order of Federal Agency for Technical Regulation and Metrology of March 28, 2018 No. 156 of St "About approval of the national standard of the Russian Federation" (M., Federal State Unitary Enterprise Standartinform, 2018).

1.5. Activities of the Bank of Russia for providing BFPS include:

the organization of risk management system in PS, inherent in business process within which functioning of PS is provided (further - business process) and liquidity risk management, credit risks, operational risks, including legal risks, in PS which realization is capable to make the negative impact on the Bank of Russia provided by the criteria for evaluation of impact of risk established in the Bank of Russia and which have potential to realization in business process (further - significant risks) including carrying out operation analysis (steps) business process for the purpose of identification of the risks inherent in business process, determination among the identified risks of significant risks, evaluating significant risks, determination and application of responses to significant risks and monitoring of key indicators of risks (further in case of joint mentioning - risk management in PS);

identification of incidents, ensuring functioning of PS in the conditions of incident and recovery of proper rendering UPI, including recovery of rendering UPI in case of suspension of their rendering (further in case of joint mentioning - management of continuity of functioning of PS);

the organization of interaction of the Bank of Russia and members of PS on providing BFPS.

1.6. The Bank of Russia will organize activities for providing BFPS taking into account the organizational management model risks providing independent bank management of Russia risks in PS.

Activities for providing BFPS are performed including with use of the specialized software.

1.7. Providing BFPS is performed taking into account established in the Bank of Russia of procedure and requirements to realization of process management.

Chapter 2. The organizational structure used by the Bank of Russia when providing BFPS

2.1. The organizational structure used by the Bank of Russia when providing BFPS is created on the basis of the principle of three lines of protection:

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info